I meant the /var/log/lfd.log and start at the time of occurrence. Putting $timing=1; at the top in /etc/csf/lfd.pl will display time consumption for each execution so you'll be able to see in the lfd.log what actually exceeds the time limit.
You should have /etc/csf/lfd.pl file. Open it with your text editor such as nano or vi and then at the top of the file add $timing=1; .This will enable the lfd to record time consumption for each execution it makes. So then you will be able to see in your /var/log/lfd.log exactly how much time does this or that take and hopefully you'll be able to track down whatever is exceeding the time limit. Even though, you should review the log file right now from 9:37 when the problem started and see what does it say.
It will show exactly what lfd is doing that takes so much time. What did the logs say, have you checked logs? Did you make any changes to the system perhaps? Most of those messages also false flags anyway. If you don't want to bother, you can disable process tracking by setting PT_LIMIT=0 in your csf interface.
It wasn't needed that I could tell, and I wasn't getting any good answers from any forum or any host. It's something I've never heard of, used for something else I'd never heard of. So I uninstalled it, and everything still works fine. All I can think of is when the server was deployed, the host did it. Or rather, a single tech did. Because I wasn't getting good info from the host either.